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Precedence : ROUTINE 

TO: Inspection 

Ge ne r a 1 Coun s e 1 


Date: 03/16/2006 


Attn: IIS 

Room 11102 
Attn: NSLB 

Room 7975 


From: 


Chief Divisio n Counsel 
Contact : 


CDC 


Approved By : 

Drafted By: 

Case ID #: (S) 
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(C) Title: Oversight Board Matter 

^ ^ SA I I 

[U) Synopsis: Provides notification of potential lOB matter for 

reporting as necessary. 


(C) 

(U) 



Details 


Division Int^national Terrorism squad 

is the case agent for the captioned investigation, file numbe r 



iSl .-r 

Case ID l_ 
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ALL inrOPmTIOH COKTAIlffiD 
mmm : i s : otc lass i fied exce pt 

IJHEPE SHOTiTH OTHERWISE 
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CLASSIFIED BY 65179 dMi/ ksr/pES 
PEASON: i.4 (c) 

DECLASSIFY OU: 11-14-2032 
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(S/FISA) 



(U) Serial 98 of captioned matter approves the 

issuance of an ^SL (serial 99) for the name, address, and length 
of service for i l email address which investigation 

revealed was utilized by the subject. The individual writing the 
communication has since left the Federal Bu reau of Investiga tion. 
The case agent of captioned matter was then ^ | who 

has since been replace d by writer. On or around 08/19/2005, 

Received on a CD-ROM, information pertaining 


to the NSL served. The CD-ROM contained subscriber information 
as requested, and IP login information, which was not 
specifically requested. IP login information consisted of an IP 
address {digits only} and an access time stamp- 

(U) 


Serial 239 of captioned matter approves the 
issuance of an I^SL ^(serial 237) for th e name, address, and length 
of service foi| lemail address which had in 

some form surfaced during FISC- authorized coverage of email 
accounts utilized by subject of caption ed investigation. On or 
around 2/14/2006, 1 I received on a CD-ROM, 

information pertaining to the NSL served. The CD-ROM contained 
subscriber information as requested. The CD-ROM also contained 
IP login information and, for some of the email accounts, a 
credit card number, neither of which was specifically requested. 

the knowledge of this writer, neit her th e IP 

login in formation nor the billing information provided by | I 
I ^ were utilized for investigative purposes, nor uploaded 

into ACS or any other FBI database. IP login information 
was maintained only 

on the provided CD-ROM in the lA section of 

captioned i nvestigative file and was nor , copied from the CD-ROM 
provided by I p rovided a credit card 

number in addition to the name and address of the email account 
holder, this was printed but maintained only in the lA section of 
the investigative file. 
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a result of the recent Inspector General's 
reporting on the FBI's use of National Security Letters, writer 
reviewed the material obtained via NSL in captioned matter, 
noting the above circumstance. At this time, the circumstance 
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was reported to I ~| CDC. who advised to re port 

fhi=> innjdpnh as a potential lOB matter. It is not known wh\ l I 
1 would have provided IP histories for the email addresses 
subject to the respective National Security Letters, other than 
the circumstance that IP histories assist in outlining the length 
of service for which the accounts were utilized. As noted above, 
the length of service is an item requested in both referenced 
National Security Letters. 


^ ^ Remedial action, if deemed appropriate, will 

include providir{g all the referenced CD-ROMs to the CDC for 
whatever action deemed appropriate. 


(U) National Foreign Intelligence Program Manual, 

Section 2-02, that there are certain investigative 

activities which are permitted in the absence of formally 
authorized inquiries and investigations. The collection of 
information not requested via National Security Letter, though 
provided by the respondent of National Security Letter inquiry, 
is not one of those activities. Nontheless, it was never the 
intent of the captioned employees or previous employees to 
capture information not requested in the National Security 
Letter. 
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LEAD(s) : 

Set Lead 1; (Action) 

INSPECTION 

AT WASHINGTON, DC 

(U) The Internal Investigation Section is requested to 
determine if the matter described in this communication 
constitutes a reportable lOB issue. 

set Lead 2: (Action) 

GENERAL COUNSEL 


AT WASHINGTON, DC 

(U) NSLB is requested to determine if the matter 
described in this communication constitutes a reportable lOB 
issue. 
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Automated Serial Permanent Charge-Out 
FD-5a (1-5-94) 

Date: 04/12/06 Time: 07:13 

Case ID: 278-HQ-C1229736-VIO Serial: 1311 
Description of Document: 

b2 

Type : EC b7E ' 

Date : 04/10/06 

To : GENERAL COUNSE L 

From ; I I 

Topic: (U) TO REPORT A POTENTIAL lOB MATTER TO THE OFFICE OF 

Reason for Permanent Charge^Out: 
changes made after uploading 
Employee : | ~| 
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Automated Serial Permanent Charge-Out 

FD-5a (1-5-94) 

Date: 04/07/06 Time: 11:12 

Case ID: 278-HQ-C1229736-VIO Serial: 1291 


Description of Document: 
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Type : 
Date : 

EC 

02/17/06 

b7E 

To : 



From : 



Topic : 

MANAGERIAL DEFICIENCIES 

WERE IDENTIFIED I 


Reason for Permanent Charge-Out: 
serialized incorrectly 

Employee : | ~| b6 
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Case ID : 278-HQ-C1229736-V10 ■ 
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■ -^X^Qsepa^ited the excess informstien im the griginaUy 
rqucsted inforfiaticc. The excess information is Hrappec and secured in a 
safe, pending guidance on hou to proceed i^ith the information. The 
infomiation original ly requested is niaintained with the case file and is 
pending review. 
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